In the previous minor releases we added a patch to fsync everything in the data directory after a
crash. Unfortunately its response to any error condition was to
fail, thereby preventing the server from starting up, even when the
problem was quite harmless. An example is that an unwritable file
in the data directory would prevent restart on some platforms; but
it is common to make SSL certificate files unwritable by the
server. Revise this behavior so that permissions failures are
ignored altogether, and other types of failures are logged but do
not prevent continuing.

The failure this restriction was meant to prevent seems to not
be a problem anymore on current OpenBSD versions.

Allow libpq to use TLS protocol
versions beyond v1 (Noah Misch)

For a long time, libpq was
coded so that the only SSL protocol it would allow was TLS v1. Now
that newer TLS versions are becoming popular, allow it to negotiate
the highest commonly-supported TLS version with the server.
(PostgreSQL servers were already
capable of such negotiation, so no change is needed on the server
side.) This is a back-patch of a change already released in
9.4.0.